Powershell script for multiple Group memeberlist and managerby

markus-jones-750 · October 14, 2013, 3:58am

Hello

I have a Powershell script I have working fine but I have to send an automatic email by a task scheduler via 2008 server to all managedby (owner of group) to several different group with a text of each memberlist. In my $messagebody1 - I would like to add the group name of each group that correspondes to each $messagessubject .

Example: When I run the script it will send an email to the manageredby (owner) with the memberlist listed in a text in the email. I have listed the script below and an email example: Please read the second line in the $messagebody1 that starts with The following users listed “”“”

#GroupOwnerEmail.ps1
#Prupose: Pull AD groups from grouplist, get member attributes and smtp mail to group owner for review

$smtpServer = “”

$smtpFrom = “”

$messagebody1 = "This message is notice for the quarterly group membership attestation required by our Policies.
The following users listed below are members of the ($group) group, which provides privileged access to AIX servers.
You are listed as the Custodian of this group. Please verify these users should retain this access.

If any users should be removed, please submit a Service Now Revoke Access request.

Please reply to this email, affirming that you have reviewed the access to this group.
If you are no longer the custodian, please reply stating so.
If known, please also provide the name of the person now managing this group’s members

Thank you"

$groups = Get-Content c:\temp\adgroups.txt

[string]$messagebody = “”

foreach ($group in $groups)
{

$group = Get-QADGroup $group

$ManagedBy = (Get-QADUser $Group.ManagedBy).Email

$smtpTo = $managedby

$messagebody2 = Get-QADGroupMember $group | % {

“rnrn”
“$($.NTaccountName.ToString())", " “,”$($.DisplayName.ToString())”," “,”$($_.Email.ToString())"

$smtp = New-Object Net.Mail.SmtpClient($smtpServer)

$messageSubject = “Action Required - Review Members List For group " + " $Group - 4th Quarter”

$smtp.Send($smtpFrom,$smtpTo,$messagesubject,$messagebody1 + $messagebody2)

}

Here is the email that’s generated:

-----Original Message-----
From: MyEmail
Sent: Monday, October 14, 2013 9:38 AM
To: MyEmail

Subject: Action Required - Review Members List For Group (GroupName works fine) - 4th Quarter

This message is notice for the quarterly group membership attestation required by our Policies.

The following users are members of the (GroupName) group, which provides privileged access to AIX servers.

You are listed as the Custodian of this group. Please verify these users should retain this access.

If any users should be removed, please submit a Service Now Revoke Access request.

Please reply to this email, affirming that you have reviewed the access to this group.

If you are no longer the custodian, please reply stating so.

If known, please also provide the name of the person now managing this group’s members

Thank you

Userid John Bob1 jbob1@mydomain.com

Userid John Bob2 jbob2@mydomain.com

Userid John Bob3 jbob3@mydomain.com

Userid John Bob4 jbob4@mydomain.com

I have four different group with four different manageredby to receive individaul email with their group lasted in the $messagebody1. The subject is working correctly - it will listed the different group names per a text file - $groups = Get-Content c:\temp\adgroups.txt.

Thank you

richard-siddaway · October 14, 2013, 4:39am

The simplest way would be to split $messagebody1


#GroupOwnerEmail.ps1
 #Prupose: Pull AD groups from grouplist, get member attributes and smtp mail to group owner for review
$smtpServer = â€œâ€
$smtpFrom = â€œâ€
$messagebody1 = "
If any users should be removed, please submit a Service Now Revoke Access request.
Please reply to this email, affirming that you have reviewed the access to this group.

If you are no longer the custodian, please reply stating so.

If known, please also provide the name of the person now managing this groupâ€™s members
Thank youâ€
$groups = Get-Content c:\temp\adgroups.txt
[string]$messagebody = â€œâ€
foreach ($group in $groups)

{
$messagebody0 = â€œThis message is notice for the quarterly group membership attestation required by our Policies.

The following users listed below are members of the ($group) group, which provides privileged access to AIX servers.

You are listed as the Custodian of this group. Please verify these users should retain this access."
$group = Get-QADGroup $group
$ManagedBy = (Get-QADUser $Group.ManagedBy).Email
$smtpTo = $managedby
$messagebody2 = Get-QADGroupMember $group | % {
â€œrnrnâ€

â€œ$($.NTaccountName.ToString())â€, â€ â€œ,â€$($.DisplayName.ToString())â€,â€ â€œ,â€$($_.Email.ToString())â€
}
$smtp = New-Object Net.Mail.SmtpClient($smtpServer)
$messageSubject = â€œAction Required â€“ Review Members List For group â€ + â€ $Group â€“ 4th Quarterâ€
$smtp.Send($smtpFrom,$smtpTo,$messagesubject,$messagebody0 + $messagebody1 + $messagebody2)

}

I don’t have a system I can test this on but think it should work

I would also avoid reusing $group - you had

foreach ($group in $groups)
{

$group = Get-QADGroup $group

When you come back to this script it could get confusing using $group in 2 different ways

markus-jones-750 · October 14, 2013, 5:06am

Nothing happen when running the script. I am confused now.

Thank you for the help

richard-siddaway · October 14, 2013, 5:36am

Can you post the code you are using?

markus-jones-750 · October 14, 2013, 5:46am

#GroupOwnerEmail.ps1
#Prupose: Pull AD groups from grouplist, get member attributes and smtp mail to group owner for review

$smtpServer = “”

$smtpFrom = “”

$messagebody1 = "This message is notice for the quarterly group membership attestation required by our Policies.
The following users listed below are members of the $group group, which provides privileged access to AIX servers.
You are listed as the Custodian of this group. Please verify these users should retain this access.

If any users should be removed, please submit a Service Now Revoke Access request.

Please reply to this email, affirming that you have reviewed the access to this group.
If you are no longer the custodian, please reply stating so.
If known, please also provide the name of the person now managing this group’s members

Thank you"

$groups = Get-Content c:\temp\adgroups.txt

[string]$messagebody = “”

foreach ($group in $groups)
{

$group = Get-QADGroup $group

$ManagedBy = (Get-QADUser $Group.ManagedBy).Email

$smtpTo = $managedby

$messagebody2 = Get-QADGroupMember $group | % {

“rnrn”
“$($.NTaccountName.ToString())", " “,”$($.DisplayName.ToString())”," “,”$($_.Email.ToString())"

$smtp = New-Object Net.Mail.SmtpClient($smtpServer)

$messageSubject = “Action Required - Review Members List For group " + " $Group - 4th Quarter”

$smtp.Send($smtpFrom,$smtpTo,$messagesubject,$messagebody1 + $messagebody2)

}

richard-siddaway · October 14, 2013, 5:49am

That’s not what I posted.

The code I posted was this:

#GroupOwnerEmail.ps1
#Prupose: Pull AD groups from grouplist, get member attributes and smtp mail to group owner for review

$smtpServer = â€œâ€

$smtpFrom = â€œâ€

$messagebody1 = "

If any users should be removed, please submit a Service Now Revoke Access request.

Please reply to this email, affirming that you have reviewed the access to this group.
If you are no longer the custodian, please reply stating so.
If known, please also provide the name of the person now managing this groupâ€™s members

Thank youâ€

$groups = Get-Content c:\temp\adgroups.txt

[string]$messagebody = â€œâ€

foreach ($group in $groups)
{

$messagebody0 = “This message is notice for the quarterly group membership attestation required by our Policies.
The following users listed below are members of the ($group) group, which provides privileged access to AIX servers.
You are listed as the Custodian of this group. Please verify these users should retain this access.”

$group = Get-QADGroup $group

$ManagedBy = (Get-QADUser $Group.ManagedBy).Email

$smtpTo = $managedby

$messagebody2 = Get-QADGroupMember $group | % {

â€œrnrnâ€
â€œ$($.NTaccountName.ToString())â€, â€ â€œ,â€$($.DisplayName.ToString())â€,â€ â€œ,â€$($_.Email.ToString())â€

}

$smtp = New-Object Net.Mail.SmtpClient($smtpServer)

$messageSubject = â€œAction Required â€“ Review Members List For group â€ + â€ $Group â€“ 4th Quarterâ€

$smtp.Send($smtpFrom,$smtpTo,$messagesubject,$messagebody0 + $messagebody1 + $messagebody2)

}

markus-jones-750 · October 14, 2013, 6:08am

I apologize I don’t know how I pasted my script in there. Your script works man. I really do apreciate the help. I am new to writing powershell script but not new to powershell. I haven’t wrote powershell script to that magnitude. Lol, I can run a powershell cmdlet and generate data but I will say that I loving the opportunity to write these scripts. I have another one I have to create for users account last password change by time and date stamp for over 50,000 users.

Again, thank you for the help.

markus-jones-750 · October 14, 2013, 6:31am

This is what I got for the password date and time stamp!

Function Get-XADUserPasswordExpirationDate() {

Param (
	[Parameter(Mandatory=$true,  Position=0,  ValueFromPipeline=$true, HelpMessage="Identity of the Account")]
	[Object] $accountObj
)

PROCESS {
    If ($accountObj.PasswordExpired) 
	{	Return "Expired"
    } 
	Else 
	{	If ($accountObj.PasswordNeverExpires) 
		{	Return "Password set to never expire"
        } 
		Else 
		{	$passwordSetDate = $accountObj.PasswordLastSet
            If ($passwordSetDate -eq $null) 
			{	Return "Password has never been set"
            }  
			Else 
			{	$maxPasswordAgeTimeSpan = $null
                $dfl = (get-addomain).DomainMode
                If ($dfl -ge 3) 
				{	## Greater than Windows2008 domain functional level
                    $accountFGPP = Get-ADUserResultantPasswordPolicy $accountObj
                    If ($accountFGPP -ne $null) 
					{	$maxPasswordAgeTimeSpan = $accountFGPP.MaxPasswordAge
                    } 
					Else 
					{	$maxPasswordAgeTimeSpan = (Get-ADDefaultDomainPasswordPolicy).MaxPasswordAge
                    }
                } 
				Else 
				{	$maxPasswordAgeTimeSpan = (Get-ADDefaultDomainPasswordPolicy).MaxPasswordAge
                }
                If ($maxPasswordAgeTimeSpan -eq $null -or $maxPasswordAgeTimeSpan.TotalMilliseconds -eq 0) 
				{	Return "MaxPasswordAge is not set for the domain or is set to zero!"
                } 
				Else 
				{	Return ($passwordSetDate + $maxPasswordAgeTimeSpan)
                }
            }
        }
    }
}

}

cls
$Result = @()
$Users = Get-ADUser -Filter * -Properties GivenName,sn,PasswordExpired,PasswordLastSet,PasswordneverExpires
ForEach ($User in $Users)
{ $Result += New-Object PSObject -Property @{
‘Last Name’ = $User.sn
‘First Name’ = $User.GivenName
UserName = $User.SamAccountName
Expiration = $($User | Get-XADUserPasswordExpirationDate)
}
}
$Result = $Result | Select ‘Last Name’,‘First Name’,UserName,Expiration | Sort ‘Last Name’

#Produce a CSV
$Result | Export-Csv c:\temp\passwordexpirationdate.csv

#Send HTML Email
$Header = @"
<style>
TABLE {border-width: 1px;border-style: solid;border-color: black;border-collapse: collapse;}
TD {border-width: 1px;padding: 3px;border-style: solid;border-color: black;}
</style>
"@
$splat = @{
From = “”
To = “”
SMTPServer = “”
Subject = “Password Expiration Report”
}
$Body = $Result | ConvertTo-Html -Head $Header | Out-String
Send-MailMessage @splat -Body $Body -BodyAsHTML -Attachments $Path\ExpirationReport.csv

Topic		Replies	Views
I have an array of users and managers and I want to group by manager PowerShell Help	6	238	October 21, 2021
Send email for each user that has been disabled to their managers PowerShell Help	8	148	November 17, 2020
Email Send PowerShell Help	11	126	April 13, 2018
Message Trace for all DL's at once Script advice PowerShell Help	3	178	October 16, 2023
Sending Array to Email body PowerShell Help	5	210	January 24, 2015

Powershell script for multiple Group memeberlist and managerby

Related Topics